/caps-man channel
add band=2ghz-g/n name=channel_2.4 tx-power=20
/caps-man datapath
add client-to-client-forwarding=yes name=datapath_25
add client-to-client-forwarding=yes name=datapath_wifi vlan-id=100 vlan-mode=\
use-tag
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] speed=100Mbps
set [ find default-name=ether11 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether12 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether13 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=Megafon password=\
***** use-peer-dns=yes user=******
/interface vlan
add arp=local-proxy-arp interface=ether5 name=vlan100 vlan-id=100
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=security_25 passphrase=****
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=security_wifi passphrase=*****
/caps-man configuration
add channel=channel_2.4 datapath=datapath_25 hide-ssid=yes mode=ap name=\
cfg_25 rx-chains=0,1,2 security=security_25 ssid=local25 tx-chains=0,1,2
add channel=channel_2.4 datapath=datapath_wifi hide-ssid=no mode=ap name=\
cfg_wifi rx-chains=0,1,2 security=security_wifi ssid=Inet tx-chains=0,1,2
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vlan100 lease-time=30m \
name=dhcp3
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
cfg_25 name-format=identity slave-configurations=cfg_wifi
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 disabled=yes frame-types=admit-only-vlan-tagged interface=\
ether5 pvid=100
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=Megafon list=WAN
add interface=bridge1 list=LAN
/ip address
add address=192.168.25.16/24 interface=ether4 network=192.168.25.0
add address=192.168.100.1/24 interface=vlan100 network=192.168.100.0
/ip dhcp-server config
set store-leases-disk=15m
/ip dhcp-server lease
add address=192.168.100.254 client-id=1:64:d1:54:8b:ad:* mac-address=\
64:D1:54:8B:AD:* server=dhcp3
add address=192.168.100.253 client-id=1:4c:5e:c:e3:69:* mac-address=\
4C:5E:0C:E3:69:* server=dhcp3
add address=192.168.100.252 client-id=1:e4:8d:8c:68:b2:* mac-address=\
E4:8D:8C:68:B2:* server=dhcp3
add address=192.168.100.251 client-id=1:64:d1:54:8b:ad:* mac-address=\
64:D1:54:8B:AD:* server=dhcp3
/ip dhcp-server network
add address=192.168.100.0/24 gateway=192.168.100.0 netmask=24
/ip firewall filter
add action=drop chain=forward comment="Invalid pacet" connection-state=\
invalid
add action=drop chain=input comment="Invalid pacet" connection-state=invalid
add action=accept chain=forward connection-state=related,new
add action=accept chain=input connection-state=related,new
add action=drop chain=input connection-state="" in-interface=ether1
add action=drop chain=forward connection-state="" in-interface=ether1
add band=2ghz-g/n name=channel_2.4 tx-power=20
/caps-man datapath
add client-to-client-forwarding=yes name=datapath_25
add client-to-client-forwarding=yes name=datapath_wifi vlan-id=100 vlan-mode=\
use-tag
/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether1 ] speed=100Mbps
set [ find default-name=ether2 ] speed=100Mbps
set [ find default-name=ether3 ] speed=100Mbps
set [ find default-name=ether4 ] speed=100Mbps
set [ find default-name=ether5 ] speed=100Mbps
set [ find default-name=ether6 ] speed=100Mbps
set [ find default-name=ether7 ] speed=100Mbps
set [ find default-name=ether8 ] speed=100Mbps
set [ find default-name=ether9 ] speed=100Mbps
set [ find default-name=ether10 ] speed=100Mbps
set [ find default-name=ether11 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether12 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
set [ find default-name=ether13 ] advertise=\
10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full
/interface pppoe-client
add add-default-route=yes disabled=no interface=ether1 name=Megafon password=\
***** use-peer-dns=yes user=******
/interface vlan
add arp=local-proxy-arp interface=ether5 name=vlan100 vlan-id=100
/caps-man security
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=security_25 passphrase=****
add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \
name=security_wifi passphrase=*****
/caps-man configuration
add channel=channel_2.4 datapath=datapath_25 hide-ssid=yes mode=ap name=\
cfg_25 rx-chains=0,1,2 security=security_25 ssid=local25 tx-chains=0,1,2
add channel=channel_2.4 datapath=datapath_wifi hide-ssid=no mode=ap name=\
cfg_wifi rx-chains=0,1,2 security=security_wifi ssid=Inet tx-chains=0,1,2
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=dhcp_pool0 ranges=192.168.100.2-192.168.100.254
/ip dhcp-server
add address-pool=dhcp_pool0 disabled=no interface=vlan100 lease-time=30m \
name=dhcp3
/caps-man provisioning
add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\
cfg_25 name-format=identity slave-configurations=cfg_wifi
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether6
add bridge=bridge1 interface=ether7
add bridge=bridge1 interface=ether8
add bridge=bridge1 interface=ether9
add bridge=bridge1 interface=ether10
add bridge=bridge1 interface=ether11
add bridge=bridge1 interface=ether12
add bridge=bridge1 interface=ether13
add bridge=bridge1 disabled=yes frame-types=admit-only-vlan-tagged interface=\
ether5 pvid=100
/interface list member
add interface=ether1 list=WAN
add interface=ether2 list=LAN
add interface=ether3 list=LAN
add interface=ether4 list=LAN
add interface=ether5 list=LAN
add interface=ether6 list=LAN
add interface=ether7 list=LAN
add interface=ether8 list=LAN
add interface=ether9 list=LAN
add interface=ether10 list=LAN
add interface=ether11 list=LAN
add interface=ether12 list=LAN
add interface=ether13 list=LAN
add interface=Megafon list=WAN
add interface=bridge1 list=LAN
/ip address
add address=192.168.25.16/24 interface=ether4 network=192.168.25.0
add address=192.168.100.1/24 interface=vlan100 network=192.168.100.0
/ip dhcp-server config
set store-leases-disk=15m
/ip dhcp-server lease
add address=192.168.100.254 client-id=1:64:d1:54:8b:ad:* mac-address=\
64:D1:54:8B:AD:* server=dhcp3
add address=192.168.100.253 client-id=1:4c:5e:c:e3:69:* mac-address=\
4C:5E:0C:E3:69:* server=dhcp3
add address=192.168.100.252 client-id=1:e4:8d:8c:68:b2:* mac-address=\
E4:8D:8C:68:B2:* server=dhcp3
add address=192.168.100.251 client-id=1:64:d1:54:8b:ad:* mac-address=\
64:D1:54:8B:AD:* server=dhcp3
/ip dhcp-server network
add address=192.168.100.0/24 gateway=192.168.100.0 netmask=24
/ip firewall filter
add action=drop chain=forward comment="Invalid pacet" connection-state=\
invalid
add action=drop chain=input comment="Invalid pacet" connection-state=invalid
add action=accept chain=forward connection-state=related,new
add action=accept chain=input connection-state=related,new
add action=drop chain=input connection-state="" in-interface=ether1
add action=drop chain=forward connection-state="" in-interface=ether1